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Amendments to the Claims: 

This listing of claims replaces all prior versions, and listings, of claims in this application. 
Listing of Claims: 
1-13. (Canceled) 

14. (Previously Presented) A method for estimating a safe operating period for a 
continuously running software system, said method comprising the steps of: 

initializing the software system, the software system having inserted therein an assertion; 



running the software system for a first pre-determined period; 
pausing the software system; 

injecting a first data state anomaly into the software system; 

running the software system after the data state anomaly has been injected; 

with the assertion, trapping values that are known to produce hazardous outputs; 

checking for an unacceptable output from the software system; 

stopping the software system and logging the unacceptable output if an unacceptable 
output is observed; and 

stopping the software system if a second pre-determined period has elapsed without an 
unacceptable behavior being observed. 

15. (Original) The method of claim 14, further comprising repeating each of the steps 
using a second data state anomaly, said second data state anomaly different than the first data 
state anomaly. 
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16. (Original) The method of claim 15, wherein the first pre-determined period is 
changed prior to repeating the steps. 

17. (Original) The method of claim 14, wherein the first and second pre-determined 
periods comprise time periods. 

18. (Original) The method of claim 14, wherein the first and second pre-determined 
periods comprise iterations of the software system. 

19. (Canceled) 

20. (Original) The method of claim 14, wherein the step of logging the hazardous output 
comprises writing a plurality of information to a log file. 

21. (Original) The method of claim 20, wherein the plurality of information comprises a 
time stamp. 



22. (Original) The method of claim 20, wherein the plurality of information comprises an 
iteration count. 
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23. (Original) The method of claim 20, wherein the plurality of information comprises 
the first data state anomaly. 

24. (Original) The method of claim 20, wherein the plurality of information comprises a 
time stamp and the first data state anomaly. 

25. (Original) The method of claim 20, wherein the plurality of information comprises an 
iteration count and the first data state anomaly. 

26. (Original) The method of claim 20, further comprising the step of analyzing the 
plurality of information in the log file to determine a safe operating period for the continuously 
operating software system. 

27. (Previously Presented) The method of claim 1, further comprising: 

running the software system for a first period Y and thereafter injecting the first data state 
anomaly; 

running the software for a second period Q; and 

if no unacceptable output is observed, setting a safe operating duration to a period 
substantially the same as the sum of Y and Q. 
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28. (Previously Presented) The method of claim 14, further comprising setting the safe 
operating period to a period that is substantially the sum of the first and second pre-determined 
periods. 



